HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ TkBellExe RealNetworks Scheduler RealNetworks, Inc. C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ DreamPlayer 鼎点梦幻媒体播放器 PowerInfo F:\工具\DREAMPLAYER.EXE
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
+ ALCXWDM Realtek AC'97 Audio Driver (WDM) Realtek Semiconductor Corp. C:\WINDOWS\SYSTEM32\DRIVERS\ALCXWDM.SYS
+ CnsMinKP KMD Copyright (C) 3721 Corporation. C:\WINDOWS\SYSTEM32\DRIVERS\CNSMINKP.SYS
+ EagleNT C:\WINDOWS\SYSTEM32\DRIVERS\EAGLENT.SYS
+ ExpScaner ExpScan.sys C:\PROGRAM FILES\RISING\RAV\EXPSCAN.SYS
+ HookCont TDI HOOK Driver Rising tech Co. ltd C:\PROGRAM FILES\RISING\RAV\HOOKCONT.SYS
+ HookReg C:\PROGRAM FILES\RISING\RAV\HOOKREG.SYS
+ HookSys Hooksys Rising C:\PROGRAM FILES\RISING\RAV\HOOKSYS.SYS
+ HSFHWBS2 HSF_HWB2 WDM driver Conexant Systems, Inc. C:\WINDOWS\SYSTEM32\DRIVERS\HSFBS2S2.SYS
+ HSF_DP HSF_DP driver Conexant Systems, Inc. C:\WINDOWS\SYSTEM32\DRIVERS\HSFDPSP2.SYS
+ k750bus Sony Ericsson 750 Driver MCCI C:\WINDOWS\SYSTEM32\DRIVERS\K750BUS.SYS
+ mdmxsdk Diagnostic Interface DRIVER Conexant C:\WINDOWS\SYSTEM32\DRIVERS\MDMXSDK.SYS
+ MEMSCAN MemScan Driver 瑞星软件有限公司 C:\PROGRAM FILES\RISING\RAV\MEMSCAN.SYS
+ npkcrypt F:\QQ\NPKCRYPT.SYS
+ npkcusb nProtect KeyCrypt Driver INCA Internet Co., Ltd. F:\QQ\NPKCUSB.SYS
+ nv NVIDIA Compatible Windows 2000 Miniport Driver, Version 56.73 NVIDIA Corporation C:\WINDOWS\SYSTEM32\DRIVERS\NV4_MINI.SYS
+ Ptilink Direct Parallel Link Driver Parallel Technologies, Inc. C:\WINDOWS\SYSTEM32\DRIVERS\PTILINK.SYS
+ Secdrv SafeDisc driver C:\WINDOWS\SYSTEM32\DRIVERS\SECDRV.SYS
+ sisagp SiS NT AGP Filter Silicon Integrated Systems Corporation C:\WINDOWS\SYSTEM32\DRIVERS\SISAGP.SYS
+ SISNIC SiS PCI Fast Ethernet Adapter Driver SiS Corporation C:\WINDOWS\SYSTEM32\DRIVERS\SISNIC.SYS
+ winachsf HSF_CNXT driver Conexant Systems, Inc. C:\WINDOWS\SYSTEM32\DRIVERS\HSFCXTS2.SYS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
+ C:\WINDOWS\DOWNLO~1\CnsHook.dll 3721 CNS Module 北京三七二一科技有限公司 C:\WINDOWS\DOWNLO~1\CNSHOOK.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ 显示摇曳 CPL 扩展 DESKPAN.DLL
+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve, Inc. C:\WINDOWS\SYSTEM32\HTICONS.DLL
+ 粉碎文件 Wiper 动态链接库 C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YWIPER.DLL
+ Yahoo!Photo yPhtb Yahoo! China C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YPHTB.DLL
+ Sony Ericsson 文件管理器 File Manager interface Sony Ericsson Mobile Communications AB C:\PROGRAM FILES\SONY ERICSSON\MOBILE\FILE MANAGER\FMGRGUI.DLL
+ RealOne Player Context Menu Class F:\工ぞ具運\RPSHELL.DLL
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions
+ 红心游戏世界 F:\宽带中国\BDGAME\REDHEART\GAMEHALL.EXE
+ 修复浏览器 HTTP://CN.ZS.YAHOO.COM/CNSBUTTON.HTM?SOURCE=CNS&BTN=REPAIR
+ 清理上网记录 HTTP://CN.ZS.YAHOO.COM/CNSBUTTON.HTM?SOURCE=CNS&BTN=CLEAN
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\KnownDlls
+ DllDirectory C:\WINDOWS\SYSTEM32
kankan shi bu shi zhong bingdu l